nixos-config/nixos/machines/orbi/configuration.nix

66 lines
1.6 KiB
Nix

{ lib, config, pkgs, ... }: {
imports = [
./hardware-configuration
../../system/all/defaults.nix
../../components
../../modules
./service-forgejo.nix
./service-hedgedoc.nix
./service-photoprism.nix
./service-taskserver.nix
./service-vaultwarden.nix
./nginx-ingolf-wagner-de.nix
./nginx-wkd.nix
./network-tinc.nix
./network-wireguard.nix
./media-arr.nix
./media-jellyfin.nix
./media-nextcloud.nix
./media-share.nix
./media-syncthing.nix
./media-transmission2.nix
./social-jitsi.nix
./social-matrix-terranix.nix
];
networking.hostName = "orbi";
components.terminal.enable = true;
components.mainUser.enable = true;
components.gui.enable = false;
components.network.enable = true;
components.network.nginx.landingpage.enable = false;
components.network.wifi.enable = false;
components.monitor.enable = true;
networking.firewall.interfaces.wg0.allowedTCPPorts = [ 4317 ];
networking.firewall.interfaces.wg0.allowedUDPPorts = [ 4317 ];
components.monitor.opentelemetry.receiver.endpoint = "0.0.0.0:4317";
components.monitor.opentelemetry.exporter.endpoint = "10.100.0.2:4317"; # chnungus
security.acme.acceptTerms = true;
security.acme.defaults.email = "contact@ingolf-wagner.de";
sops.defaultSopsFile = ../../secrets/orbi.yaml;
# chungus rsync
users.users.root.openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJkqVvuJSvRMO5pG2CHNNBxjB7HlJudK4TQs3BhbOWOD" ];
# todo : need this for syncoid
environment.systemPackages = [
pkgs.mbuffer
pkgs.lzop
pkgs.gzip
];
}